Expose X509_VERIFY_PARAM_get_hostflags()

This is needed by Python 3.14, extending the urllib3 nonsense further.
This is a trivial getter and it is exercised by the libssl unit test
I added for urllib3 (which can now use dynamic linking for libcrypto).

Fixes https://github.com/libressl/portable/issues/1202
Thanks to @orbea for the report.

ok kenjiro

PS: X509_VERIFY_PARAM_get_flags() and X509_VERIFY_PARAM_get_peername()
aren't const correct. Fixing this will require some doing...

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/libcrypto/hidden/openssl/x509_vfy.h b/src/lib/libcrypto/hidden/openssl/x509_vfy.h
index cc0991518f..d0c46b655e 100644
--- a/src/lib/libcrypto/hidden/openssl/x509_vfy.h
+++ b/src/lib/libcrypto/hidden/openssl/x509_vfy.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.h,v 1.10 2025/03/09 15:20:20 tb Exp $ */
+/* $OpenBSD: x509_vfy.h,v 1.11 2025/10/24 11:33:38 tb Exp $ */
 /*
  * Copyright (c) 2022 Bob Beck <beck@openbsd.org>
  *
@@ -122,6 +122,7 @@ LCRYPTO_USED(X509_VERIFY_PARAM_set1_name);
 LCRYPTO_USED(X509_VERIFY_PARAM_set_flags);
 LCRYPTO_USED(X509_VERIFY_PARAM_clear_flags);
 LCRYPTO_USED(X509_VERIFY_PARAM_get_flags);
+LCRYPTO_USED(X509_VERIFY_PARAM_get_hostflags);
 LCRYPTO_USED(X509_VERIFY_PARAM_set_purpose);
 LCRYPTO_USED(X509_VERIFY_PARAM_set_trust);
 LCRYPTO_USED(X509_VERIFY_PARAM_set_depth);